网络欺骗技术综述

摘要

The asymmetric situation of network attacks and defenses is one of the key issues of current network security.Cyber deception was a revolutionary technology introduced by defenders to alter the asymmetric situation.By thwarting an attacker's cognitive processes,defenders can mislead attackers,hence causing them to take specific actions that aid network security defenses.In this way,defenders can log attackers' behavior and method,increase cost for the attackers to launch a successful attack,as well as reduce the probability of an attacker's success.Cyber deception formally and clas-sify cyber deception into four classes was defined.Then,the cyber deceptions' development was divided into three stages,and each stage's character was decided.Next,a hierarchical model to describe the existing work was proposed.At last,the countermeasures in cyber deception and the development trends in this field was discussed.%网络攻防不对称是当前网络安全面临的核心问题之一.基于欺骗的防御技术是防御方为改变这种不对称格局而引入的一种新思路,其核心思想是通过干扰攻击者的认知以促使攻击者采取有利于防御方的行动,从而记录攻击者的活动与方法、增加其实施攻击的代价、降低其攻击成功的概率.首先,对网络欺骗进行形式化定义并依据欺骗环境构建方法将其划分为4种.同时,将网络欺骗的发展历程概括为3个阶段,分析各个阶段特点.然后,提出网络欺骗的层次化模型并对已有研究成果进行介绍.最后,对网络欺骗对抗手段进行分析与总结并介绍网络欺骗技术发展趋势.